OpenSSL is celebrating our FIPS 140-2 certification with a special offer for
our Premium Support Customers by providing access to a free rebranding of the
OpenSSL 3.0 FIPS 140-2 certificate.
The OpenSSL Management Committee on behalf of the OpenSSL Project is pleased to
announce that the OpenSSL 3.0 FIPS Provider has had its FIPS 140-2 validation
certificate
issued by NIST & CSE.
We have previously talked about our plans for OpenSSL 3.0 and FIPS support
here. This blog
post will give an update about what has been happening since then.
At the Face to Face meeting held on the occasion of the ICMC19 Conference
in Vancouver, a novelty was introduced: For the last day of the meeting all
committers were invited to participate, either personally or remotely via video conference.
As mentioned in a previous
blog post, OpenSSL team members met with various representatives of the FIPS
sponsor organisations back in September last year to discuss design and planning
for the new FIPS module development project.
Since then there has been much design work taking place and we are now able to
publish the draft design documentation. You can read about how we see the longer
term architecture of OpenSSL changing in the future
here and you
can read about our specific plans for OpenSSL 3.0 (our next release which will
include a FIPS validated module)
here.